Cracking Ettercap Generated hashes

From: Danux <danuxx@xxxxxxxxx>
Date: Fri, 16 Nov 2007 17:30:17 -0600

Hi Experts,

After testing a client network, i got a hash through Ettercap(ARP
Spoofing) , but when trying to cracking the hash with RainbowCrack it
seems not to be a NTLM format, and nothing happens.
Here i show the hash gathered:

SMB : 172.16.16.135:445 ->
USER: mjones
HASH:
mjones:"":"":1EA3083687301F2E00000000000000000000000000000000:2F8EDA1AD20B80974F86656996787855C5CF3417FD44BF03:BD9AE7964A5E989B
DOMAIN: IMS

Do you know how to crack hashes gathered from Ettercap(ARP Spoofing)?

--
Danux, CISSP
Chief Information Security Officer
Macula Security Consulting Group
www.macula-group.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Follow-Ups:
- Re: Cracking Ettercap Generated hashes
  - From: Kurt Grutzmacher
- Re: Cracking Ettercap Generated hashes
  - From: Jan Heisterkamp
- RE: Cracking Ettercap Generated hashes
  - From: Shenk, Jerry A

Prev by Date: Introducing penetrationtests.com - a directory project
Next by Date: Network Security Assessment 2nd Edition
Previous by thread: Introducing penetrationtests.com - a directory project
Next by thread: RE: Cracking Ettercap Generated hashes
Index(es):
- Date
- Thread